
Ultimate access to all questions.
In the context of deploying a machine learning model that processes payment card transactions, which compliance standard must be strictly adhered to ensure the security and integrity of payment card data throughout the transaction process? Consider the need for encryption, access control, and regular security testing. Choose the best option from the following:
A
GDPR (General Data Protection Regulation), which focuses on the protection of personal data and privacy within the European Union, but does not specifically address payment card data security.
B
SOX (Sarbanes-Oxley Act), a US federal law aimed at improving the accuracy and reliability of corporate disclosures, with no specific provisions for payment card data security.
C
PCI-DSS (Payment Card Industry Data Security Standard), a set of security standards designed to ensure that all companies that process, store, or transmit credit card information maintain a secure environment.
D
HIPAA (Health Insurance Portability and Accountability Act), which safeguards medical information and patient privacy, but does not cover payment card data security.